Commit Graph

2631 Commits (3624c74ce880168eb456f15ef50a92d1cbff8da1)

Author SHA1 Message Date
Kubernetes Prow Robot 054a676141
Merge pull request #74142 from javier-b-perez/master
GCE config.sh script should use headers for curl GCS apis
2019-02-20 21:41:12 -08:00
Michael Taufen cf3ad9c655 Fix hash if statement 2019-02-20 16:56:00 -08:00
Kubernetes Prow Robot f04ce297d6
Merge pull request #74100 from mtaufen/file-download-improvements
Retry downloads, respect URL list, validate tar hash
2019-02-20 11:34:06 -08:00
Michael Taufen 7ffe810f1d Retry downloads, respect URL list, validate tar hash 2019-02-20 08:52:46 -08:00
Kubernetes Prow Robot db7d930aab
Merge pull request #74109 from pjh/gce-windows-cluster-smoke-test
Detect ready pods correctly and untaint Windows nodes in smoke-test.
2019-02-19 19:57:40 -08:00
Peter Hornyack 8a7fe26888 Detect ready pods correctly and untaint Windows nodes in smoke-test. 2019-02-19 11:48:54 -08:00
xichengliudui fd044c5770 make more of the shell pass lints 2019-02-18 00:42:46 -05:00
Kubernetes Prow Robot 5aaf6cd61b
Merge pull request #72386 from logicalhan/readiness
fail faster for readiness checks
2019-02-15 18:02:30 -08:00
Javier Pérez Hernández 708d7df561 k8s: gci: configure: add token to curl calls
Modify script to use curl to get metadata and Service Account token.
When the SA doesn't have 'Storage Read' scope, it can only read
public files.
2019-02-15 11:00:35 -08:00
Kubernetes Prow Robot 6f6f8bdfcc
Merge pull request #73822 from justinsb/renamed_set_node_image
e2e upgrade test: rename functions to match f0f7829934
2019-02-13 19:06:20 -08:00
Kubernetes Prow Robot 812016fa23
Merge pull request #73818 from gnufied/add-e2e-for-no-expand
add e2e test when expansion is disabled
2019-02-13 12:16:09 -08:00
Kubernetes Prow Robot aefd281143
Merge pull request #73983 from ixdy/update-bazel-deps
Update repo-infra, bazel-skylib, and rules_docker dependencies
2019-02-13 11:00:08 -08:00
Hemant Kumar 7d823e5df0 also remove slow tag from resizing tests 2019-02-13 10:48:49 -05:00
Jeff Grafton e216995ef1 Update repo-infra, bazel-skylib, rules_docker, and rules_go dependencies
Also require bazel 0.18.0+
2019-02-12 17:55:10 -08:00
Peter Hornyack 063725230d Delete RDP firewall rule during kube-down.
This rule is only created if the cluster has one or more Windows nodes,
but delete-firewall-rules() ignores firewall rule arguments that do not
exist so it's safe to always attempt to delete this rule.
2019-02-12 15:19:16 -08:00
Kubernetes Prow Robot b50c643be0
Merge pull request #73540 from rlenferink/patch-5
Updated OWNERS files to include link to docs
2019-02-08 09:05:56 -08:00
Justin SB 28c34d8d71
e2e upgrade test: rename functions to match f0f7829934
These functions were renamed in
f0f7829934, but cluster/gce/upgrade.sh
was missed.
2019-02-07 13:27:34 -05:00
Matt Matejczyk 4dcc017d7a Propagate API_SERVER_TEST_LOG_LEVEL in cluster/gce/util.sh 2019-02-05 10:30:17 +01:00
Roy Lenferink b43c04452f Updated OWNERS files to include link to docs 2019-02-04 22:33:12 +01:00
Maciej Borsz afeabe99b7 Fix typo in create-heapster-node 2019-02-01 11:04:23 +01:00
Kubernetes Prow Robot 244795a06a
Merge pull request #73442 from pjh/gce-windows-cluster
Update cluster/gce/ scripts to support Windows nodes.
2019-01-31 18:20:37 -08:00
Kubernetes Prow Robot 46fc4dd96a
Merge pull request #73577 from wojtek-t/remove_vmodule
Remove vmodule from apiserver to reduce lock contention
2019-01-31 04:59:42 -08:00
wojtekt 3032d92736 Remove vmodule from apiserver to reduce lock contention 2019-01-31 10:53:44 +01:00
Peter Hornyack f0f7829934 Update cluster/gce scripts to support Windows nodes. 2019-01-30 19:49:07 -08:00
Matt Matejczyk 12904ac911 Tune suggested master disk sizes for big clusters.
Looks like the get-master-root-disk-size() and get-master-disk-size() functions didn't anticipate
clusters bigger than 2K nodes.

In https://github.com/kubernetes/kubernetes/issues/72976 we found out
that 100GB may be not enough for large clusters (5K nodes) when it comes
to master root disk size.

Updating both get-master-root-disk-size() and get-master-disk-size() to
make them consistent and match cluster sizes with get-master-size()
function.
2019-01-29 10:48:08 +01:00
Kubernetes Prow Robot d306d68a36
Merge pull request #72978 from liggitt/addon-changelog
Update addon-manager changelog/image
2019-01-24 16:30:00 -08:00
Kubernetes Prow Robot c21f60f862
Merge pull request #73268 from wojtek-t/better_scale_inflights
Better scale max-inflight request limits to correlate them with master VM size
2019-01-24 10:37:25 -08:00
wojtekt d911ebbc3f Correlate max-inflight values in GCE with master VM sizes 2019-01-24 15:13:36 +01:00
Yu-Ju Hong 2edd3e3f52 GCE: add yujuhong to OWNERS 2019-01-23 14:46:29 -08:00
Kubernetes Prow Robot 0713f29c28
Merge pull request #72062 from jpbetz/gce-logrotate-check-interval
Perform GCE master log rotation check every 5 minutes
2019-01-16 14:45:22 -08:00
Jordan Liggitt df97217f7f Update addon-manager changelog/image 2019-01-16 13:26:39 -05:00
Kubernetes Prow Robot d95b9f16d1
Merge pull request #70144 from wenjiaswe/etcdKasTls
Add mTLS encription between etcd and kube-apiserver in GCE
2019-01-16 02:51:06 -08:00
Tim Allclair 485b21e8cb Fix kube-proxy PodSecurityPolicy RoleBinding namespace 2019-01-09 17:57:15 -08:00
Wenjia Zhang c17233c41c add mTLS encription between etcd and kube-apiserver in GCE 2019-01-07 13:52:20 -08:00
Kubernetes Prow Robot 9cdfdba14c
Merge pull request #71924 from yujuhong/node-binaries
GCE: enable downloading and staging of the node binaries
2018-12-28 18:07:26 -08:00
Han Kang e9a39533c3 fail faster for readiness checks 2018-12-27 16:17:02 -08:00
Joe Betz 1ba05d51a6 Perform GCE log rotation check every 5 minutes 2018-12-18 10:13:41 -08:00
Kubernetes Prow Robot cf813b247d
Merge pull request #71977 from rramkumar1/kube-dns-ordering
DNS service ordering for addon manager
2018-12-18 01:47:49 -08:00
wojtekt fc346b2086 Allow for configuring etcd servers addresses in kubemark 2018-12-13 11:50:49 +01:00
Rohit Ramkumar bc44940835 Modify dns addons dir to prepend 0 on dir name. Ensures proper ordering upon creation by addon manager 2018-12-12 13:15:08 -08:00
Yu-Ju Hong f87fcf6ce8 GCE: enable downloading and staging of the node binaries
Currently, only kubernetes-server-linux-<arch>.tar.gz will be downloaded
and staged for tests. It is not possible to test a cluster where the
platform/arch of the nodes differs from that of the master
control-plane. This changes allows downloading and staging node
binaries, in addition to the existing server binaries.
2018-12-10 16:58:44 -08:00
Matt Brannock d99422884b Create managed instance groups for nodes in parallel 2018-12-04 13:56:52 -08:00
Kubernetes Prow Robot a9b69dc381
Merge pull request #71615 from jpbetz/etcd-3.3.10-0-image
Update default etcd server to 3.3.10 for kubernetes 1.14
2018-12-04 02:54:34 -08:00
Joe Betz 862b945e5a Update default etcd server to 3.3.10 for kubernetes 1.13 2018-12-03 11:03:49 -08:00
Zhen Wang 29de74375a Use Node-Problem-Detector v0.6.0 2018-11-28 11:44:36 -08:00
Łukasz Osipiuk 6db2483e0b Update Cluster Autoscaler version to 1.13.0 2018-11-28 16:06:18 +01:00
k8s-ci-robot 414cfbd821
Merge pull request #71452 from losipiuk/lo/update-ca-version-1.13
Update Cluster Autoscaler version to 1.13.0-rc.2
2018-11-27 07:06:34 -08:00
Łukasz Osipiuk 0fac5aaaad Update Cluster Autoscaler version to 1.13.0-rc.2 2018-11-27 12:47:42 +01:00
k8s-ci-robot 396271cf52
Merge pull request #70954 from qingling128/master
Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2.
2018-11-25 23:09:07 -08:00
k8s-ci-robot 2b0212de9c
Merge pull request #71206 from stlaz/enc_config_opt
Rename '--experimental-encryption-provider-config' to '--encryption-provider-config'
2018-11-21 11:30:12 -08:00
k8s-ci-robot a19bf332de
Merge pull request #71124 from Random-Liu/make-fluentd-container-runtime-service-configurable
Make fluentd container runtime service configurable.
2018-11-21 07:49:42 -08:00
Sergei Orlov 21c1bb8830
kubeapiserver: rename '--experimental-encryption-provider-config' to '--encryption-provider-config'.
This change renames the '--experimental-encryption-provider-config'
flag to '--encryption-provider-config'. The old flag is accepted but
generates a warning.

In 1.14, we will drop support for '--experimental-encryption-provider-config'
entirely.

Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-19 16:34:09 +01:00
k8s-ci-robot ca696fef26
Merge pull request #69848 from mikedanese/projadmission
migrate service account volume to a projected volume when BoundServiceAccountTokenVolumes are enabled
2018-11-16 22:46:23 -08:00
k8s-ci-robot 1e22f080ec
Merge pull request #67383 from stlaz/enc_config_promotion
Introduce apiserver.config.k8s.io/v1 and use standard method for parsing encryption config file
2018-11-16 16:31:30 -08:00
Mike Danese 98c468de8d update PSPs to allow projected volumes 2018-11-16 19:32:44 +00:00
Lantao Liu 1670b4089a Make fluentd container runtime service configurable. 2018-11-16 02:17:55 -08:00
Han Kang e1d9128978 increase the liveness probe delay for GCE e2e tests, to avoid premature teardown 2018-11-15 10:21:10 -08:00
k8s-ci-robot ca338b91f5
Merge pull request #70676 from logicalhan/exclude-checks
add ability to disable health checks on kube-apiserver for healthz using query-params
2018-11-14 11:37:48 -08:00
k8s-ci-robot 79dab474c0
Merge pull request #70555 from prameshj/nodelocaldnscache
Support running a nodelocal dns cache
2018-11-14 00:18:56 -08:00
Pavithra Ramesh 6d7c5e90ed Removed .salt template , using .sed template
Removed default config options from yaml.
Removed unused yaml files
2018-11-13 18:33:34 -08:00
Han Kang 895dd4187b exclude etcd from the liveness health check for the kube-apiserver on GCE 2018-11-13 14:48:56 -08:00
Slava Semushin c21cb548e6
Introduce kubeapiserver.config.k8s.io/v1 with EncryptionConfiguration and use a standard method for parsing config file.
Co-authored-by: Stanislav Laznicka <slaznick@redhat.com>
2018-11-13 14:05:21 +01:00
Pavithra Ramesh 73b548db06 Support running a nodelocal dns cache
This change includes the yaml files and gce startup script changes
to run this addon. It is disabled by default, can be enabled by setting
KUBE_ENABLE_NODELOCAL_DNS=true
An ip address is required for the cache instance to listen for
requests on, default is a link local ip address of value 169.254.25.10

addressed review comments, updated image location
Picked a different prometheus port so stats port is not same as the
coredns deployment

Removed the nodelocaldns-ready label.
Set memory limit to 30Mi
2018-11-12 14:54:20 -08:00
Mike Danese f3611a6264 always enable TokenRequest in GCE kube-up.sh 2018-11-12 11:24:52 -08:00
Ling Huang 02b7ed3291 Upgrade Stackdriver Logging Agent addon image to 0.6-1.6.0-1 to use Fluentd v1.2. 2018-11-12 13:21:44 -05:00
saad-ali 4a4176db42 Fix CSI CRD installation for Alpha clusters 2018-11-07 19:46:54 -08:00
k8s-ci-robot 9844baa2ff
Merge pull request #70696 from loburm/remove_cluster_autoscaler_spam
Filter out spammy audit logs from cluster autoscaler.
2018-11-07 12:53:19 -08:00
saad-ali a679486a5e Register CSI CRDs as addon 2018-11-06 10:58:09 -08:00
Marian Lobur 433be3410a Filter out spammy audit logs from cluster autoscaler. 2018-11-06 14:44:02 +01:00
Mike Danese 8c1e928501 gce: move more stuff into main and refactor detect whether configure-helpers.sh was sourced 2018-10-31 10:07:50 -07:00
Jeff Grafton 7b93b50e40 Update to use kube-addon-manager:v8.9 2018-10-24 16:19:51 -07:00
k8s-ci-robot 4cbeddd7b2
Merge pull request #70094 from mwwolters/prepare-log-file-args
Changed prepare-log-file to take args for setting uid/gid for log files.
2018-10-24 12:32:53 -07:00
Mark Wolters c9d34073f2 Changed prepare-log-file to take args for setting uid/gid for log files. 2018-10-19 11:57:26 -07:00
Chris O'Haver 0cfb4bbe2c make coredns kubeup default, update manifest 2018-10-18 14:52:38 -04:00
k8s-ci-robot 50f574f360
Merge pull request #68288 from loburm/truncating_backend
Enable audit logging truncating backend.
2018-10-11 18:26:34 -07:00
k8s-ci-robot 1aef63124b
Merge pull request #68920 from qingling128/master
Enable insertId generation, and update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s.
2018-10-11 13:44:51 -07:00
Walter Fender 8b3099ced7 Differentiate multizone zonal from Regional Cluster.
Fixed go format and unit test.
Collapse lines.
Switched to using regional throughout and added warning for HA Zonal.
2018-10-09 11:28:22 -07:00
Ling Huang d8da1baf48 Enable insertId generation, update Stackdriver Logging Agent image to 0.5-1.5.36-1-k8s and add priorityClassName for Metadata Agent. 2018-10-09 13:42:40 -04:00
wojtekt 3fdb5b92f4 Fix overwriting env variables in kube-apiserver manifest 2018-10-08 14:21:37 +02:00
Christoph Blecker 97b2992dc1
Update gofmt for go1.11 2018-10-05 12:59:38 -07:00
k8s-ci-robot 5602ab7761
Merge pull request #68379 from immutableT/kms-plugin-via-gke
Enable configure-helper.sh to support two scenarios for etcd level encryption: decryption and adding encryption to existing clusters.
2018-10-04 23:38:42 -07:00
immutablet 4bc62be0e6 Run kms-plugin in its own POD. 2018-10-04 09:19:57 -07:00
k8s-ci-robot 82a52de097
Merge pull request #68247 from awly/fetch-exec-plugin-license
Fetch gke-exec-plugin license file along with the binary
2018-10-03 15:21:31 -07:00
Zihong Zheng 81eae648cb Bump addon-manager to v8.8
- Rebase docker image on debian-base:0.3.2.
2018-10-02 11:43:40 -07:00
k8s-ci-robot da5730e883
Merge pull request #69033 from feiskyer/crictl-update
Update crictl to v1.12.0
2018-10-02 02:23:33 -07:00
Marian Lobur 3928818b64 Enable audit logging truncating backend. 2018-10-02 07:58:01 +02:00
Marian Lobur 5a118f9d2f Extract cpu requests to separate env variables. 2018-10-02 07:54:39 +02:00
k8s-ci-robot bf130aa29c
Merge pull request #69051 from cadmuxe/change_netd_node_selector
update netd node selector label to cloud.google.com/gke-netd-ready
2018-10-01 18:04:14 -07:00
k8s-ci-robot 0d5c8c2325
Merge pull request #67912 from yliaog/e2e
"gcloud beta compute networks subnets" does not work with the latest gcloud release
2018-10-01 18:03:55 -07:00
k8s-ci-robot 2a544bc709
Merge pull request #68565 from vantuvt/vantuvt-patch-1
Bug fix - revert metrics-server base CPU resources back to 40 mCPU
2018-10-01 10:59:15 -07:00
Yu Liao f4482e3abb "gcloud beta compute networks subnets" stopped working, fails with the
erros:  - The request did not match the specified API.
"gcloud compute networks subnets" works with the latest gcloud release.
2018-09-28 15:42:20 -07:00
Van Tu d3b4f2dac4 Bug fix - revert metrics-server base CPU resources back to 40 mCPU
The reduction in base CPU resources resulted in a significant increase in
start times from ~30 second to 1-4 minutes.
2018-09-28 06:18:39 -04:00
Pengfei Ni fa42ba649a Update crictl to v1.12.0 2018-09-26 09:15:10 +08:00
Koonwah Chen dc57a69c4f update netd node selector label to cloud.google.com/gke-netd-ready 2018-09-25 14:03:33 -07:00
k8s-ci-robot 74e6ee1d34
Merge pull request #67174 from charrywanganthony/auditv1beta1Tov1_gce.sh
use v1 version of advanced audit policy in gce shell
2018-09-24 13:19:44 -07:00
k8s-ci-robot 95ab206e34
Merge pull request #68896 from ixdy/etcd-3.2.24-1
cluster/gce and test/: update etcd:3.2.24-0 image to etcd:3.2.24-1
2018-09-21 14:37:43 -07:00
k8s-ci-robot 9dc5bb56a6
Merge pull request #68492 from vishh/68372
Fix node label assignment for GCE k8s clusters.
2018-09-21 04:12:08 -07:00
Jeff Grafton 3388e0ce5f Update to use etcd:3.2.24-1 image 2018-09-20 12:40:26 -07:00
k8s-ci-robot b33b0fb093
Merge pull request #68615 from loburm/revert_cpu_decrease
Revert "#67504: Decrease CPU requests of master components in two times."
2018-09-20 12:31:17 -07:00
Francois Tur 5c20fff19d
Revert "Add DNS pod resource monitoring option" 2018-09-19 14:54:29 -04:00